Early Career Cyber SOC Analyst (12mth FTC)

As an Early Career Cyber SOC Analyst at State Street, your primary responsibilities will include detecting and analyzing cybersecurity incidents in real time using our centralized monitoring systems. You'll also respond to incidents by implementing containment strategies, communicate the status of these incidents to lead analysts and managers, and actively contribute to collaborative knowledge-sharing with the wider Fusion Center team, ensuring continuous improvement in our processes.

To apply for the Early Career Cyber SOC Analyst position at State Street, candidates should ideally possess a Bachelor’s or Master’s degree in Cyber Security, Information Technology, Computer Science, or related fields. Familiarity with networking protocols, operating systems (Windows, Linux, MacOS), and a basic understanding of scripting are advantageous. Additionally, a passion for cyber security, strong communication skills, and a desire to learn are essential qualifications.

State Street provides extensive training for the Early Career Cyber SOC Analyst role, including an initial boot camp lasting up to six weeks. This hands-on training will equip you with the essential skills needed to effectively detect and respond to cyber threats while familiarizing you with the tools and technologies used in our Cyber Fusion Center.

The work environment for an Early Career Cyber SOC Analyst at State Street is dynamic and supportive. You will be part of a 24/7 SOC team where collaboration and innovation are key. The role involves shift work, including nights and weekends, ensuring around-the-clock protection for our systems. State Street fosters a culture of inclusivity and actively engages in professional development, making it an exciting place to grow your career.

An Early Career Cyber SOC Analyst contributes to State Street's mission by actively monitoring and responding to cybersecurity threats, ensuring the integrity and security of client investments. By identifying vulnerabilities and collaborating with seasoned professionals in the Cyber Fusion Center, you'll play a crucial role in protecting not just the company, but also our clients and their assets from sophisticated cyber threats.

A Security Information and Event Management (SIEM) system is a centralized tool that aggregates and analyzes security data from across an organization’s network, allowing analysts to identify threats and respond to incidents in real-time. During the interview, demonstrate your understanding of how SIEMs function and their importance in maintaining cybersecurity.

In response to a phishing attack, I would first identify the source and scope of the attack using the tools available in the SOC. Then, I would inform my team and document the incident for future reference. Finally, I'd implement containment measures, such as blocking the sender and educating affected users on safe practices to prevent future incidents.

While I may have limited professional experience, I have engaged in coursework and personal projects involving monitoring network traffic using tools like Wireshark. I understand the importance of analyzing traffic patterns for identifying unusual activity, and I am eager to apply this knowledge in a professional setting at State Street.

Prioritization is key in a SOC environment. I would assess incidents based on their severity and potential impact on the organization. Critical incidents affecting major systems would take precedence, while lower-risk events could be addressed subsequently. Effective communication with my team is crucial to ensure our response is coordinated and efficient.

I am familiar with several tools that are commonly used in the cyber security field, including SIEM platforms, endpoint detection and response (EDR) tools, and antivirus software. I am enthusiastic about learning more and adapting to the specific technologies employed at State Street to enhance my contributions to the SOC.

One example of a recent cyber threat is the rise in ransomware attacks targeting organizations globally. Mitigation strategies often involve regular system backups and ensuring timely patches are applied to software vulnerabilities. Understanding specific case studies will help illustrate my knowledge during interviews, showing I stay informed about current cybersecurity trends.

Defense in depth refers to a layered security approach where multiple security controls are implemented to protect data and systems. This means even if one layer is compromised, additional barriers exist to thwart further attacks. Explaining this concept can demonstrate your understanding of comprehensive security strategies.

I stay updated on emerging cyber threats through various methods, such as subscribing to cybersecurity news outlets, participating in online forums, and attending webinars or conferences. Showing my commitment to continuous learning would convey my proactive stance on professional development.

I am particularly drawn to State Street because of its commitment to innovation and security in the financial services sector. I value the opportunity for professional growth in a collaborative environment and appreciate State Street’s emphasis on diversity and inclusion, making it an ideal place to start my career.

Essential qualities for a successful SOC analyst include strong analytical skills, attention to detail, and the ability to communicate effectively under pressure. Being a team player with a passion for learning about new threats and technologies is equally critical. During my interview, I would aim to align my skills and attributes with those valued at State Street.